This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json) Hash identifier: eBjBLfwxFk2drbE4gw1qsvsOC8olcuF1dN9yDwyVEiY= Subject key identifier: AD:08:25:1C:AC:BA:D3:DD:9E:F2:43:FC:79:12:87:D3:13:83:F3:92 Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2 Certificate serial: 019BFBE53592C65DCE8C543AD76E89C7FE0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft Manifest number: 0747 Signing time: Mon 26 Jan 2026 20:01:01 +0000 Manifest this update: Mon 26 Jan 2026 20:01:01 +0000 Manifest next update: Tue 27 Jan 2026 20:01:01 +0000 Files and hashes: 1: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: 1HXSAF+rf1PjZ9DporRmJB7XHLHb/PPa3LmJ931hOmc=) 2: kekcgSv-eDONMe6ZG8p99c62CHY.roa (hash: YXzQs9p+P9jRTPWs0pwKa3KkCYRND2jAcNEa4dtHmUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:e5:35:92:c6:5d:ce:8c:54:3a:d7:6e:89:c7:fe:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2 Validity Not Before: Jan 26 20:01:01 2026 GMT Not After : Jan 27 20:01:01 2026 GMT Subject: CN=ad08251cacbad3dd9ef243fc791287d31383f392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:39:d6:fb:ba:3a:43:fb:cc:a6:c8:0d:65:63: 63:27:d5:77:c1:4e:71:dc:c9:36:71:e8:6a:db:57: e8:e1:4e:4d:37:51:52:5b:e6:af:bd:79:b2:4c:30: 3f:96:9c:5a:68:8a:30:c0:01:cd:39:be:67:8d:ae: c2:98:05:0e:4a:3f:65:94:a0:7e:af:51:5d:c5:25: 49:57:e7:7b:11:da:a9:f7:13:46:48:47:f1:77:c4: 55:7e:53:5d:92:59:31:b8:98:70:01:96:ac:01:3a: d1:31:aa:8e:4a:ea:ae:49:6c:d0:0f:58:2f:fc:94: ed:7e:55:63:89:5d:cb:be:04:5c:16:65:86:71:11: 29:67:4f:b9:a4:5b:9c:b1:f2:39:f8:e6:30:c6:dd: 86:a1:da:c2:ee:ff:e0:f7:dc:9b:12:80:59:40:ec: f8:f9:24:ca:5f:8d:4d:d7:26:95:2a:5e:af:01:d4: c0:b9:ed:49:95:a3:7b:7b:1b:42:11:73:08:74:72: 52:32:26:6c:00:5a:46:1c:0c:f8:14:00:d9:b0:38: 56:17:e5:81:96:04:f4:ab:1a:e8:5f:84:03:8c:52: f7:cd:d0:1d:86:4e:d2:49:25:13:f2:da:c2:0f:1c: 71:f4:cd:1c:d5:86:f1:59:54:51:e1:a1:fc:89:7b: bc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:08:25:1C:AC:BA:D3:DD:9E:F2:43:FC:79:12:87:D3:13:83:F3:92 X509v3 Authority Key Identifier: keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:14:11:28:44:9f:2c:35:42:8e:44:2d:6c:e2:a3:11:e0:d1: 3d:84:32:79:fa:93:aa:32:ce:47:14:c6:a4:5c:d8:6c:73:33: 47:16:e8:96:b4:d0:5c:86:29:fb:14:04:e0:29:cd:06:3a:09: 0f:e4:7f:34:d9:d1:c7:7f:98:41:7f:af:d7:8e:fe:07:33:de: 5c:18:a4:49:af:ab:87:db:5d:be:7c:26:54:8a:58:05:7e:91: 8c:78:70:fe:da:6d:11:50:87:31:60:3b:a6:0f:61:21:39:04: b3:2b:93:a7:ec:53:b0:7b:38:43:0b:95:05:87:cf:a7:af:60: 0c:41:35:ca:d5:3a:23:b1:31:1d:45:c0:8a:ba:86:dd:d5:2c: 55:a4:a0:1e:6d:cd:f3:04:0b:12:ae:04:01:44:0e:1d:0c:1d: 26:d4:36:96:a4:6e:d8:95:f0:62:85:2e:0d:9d:14:1e:79:5f: 16:c6:f7:92:1c:9b:0a:3d:6e:7f:d1:be:d2:fc:43:70:61:4b: 02:7b:1f:21:f7:34:aa:45:00:95:f5:f8:71:a9:7f:ea:09:9c: b7:8a:8a:df:2f:4a:71:ed:ac:75:ed:5a:01:dc:ca:e0:81:d7: 24:08:dc:60:78:51:76:96:d2:9a:76:9b:18:b2:59:bf:a3:2c: a5:7b:ce:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv75TWSxl3OjFQ6126Jx/4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWVlY2FiOTU3MGNmMGFmZmE4MWJlNzQ4ZTkxMjhmNTVl NDE2YzIwHhcNMjYwMTI2MjAwMTAxWhcNMjYwMTI3MjAwMTAxWjAzMTEwLwYDVQQD EyhhZDA4MjUxY2FjYmFkM2RkOWVmMjQzZmM3OTEyODdkMzEzODNmMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjnW+7o6Q/vMpsgNZWNjJ9V3wU5x 3Mk2cehq21fo4U5NN1FSW+avvXmyTDA/lpxaaIowwAHNOb5nja7CmAUOSj9llKB+ r1FdxSVJV+d7Edqp9xNGSEfxd8RVflNdklkxuJhwAZasATrRMaqOSuquSWzQD1gv /JTtflVjiV3LvgRcFmWGcREpZ0+5pFucsfI5+OYwxt2GodrC7v/g99ybEoBZQOz4 +STKX41N1yaVKl6vAdTAue1JlaN7extCEXMIdHJSMiZsAFpGHAz4FADZsDhWF+WB lgT0qxroX4QDjFL3zdAdhk7SSSUT8trCDxxx9M0c1YbxWVRR4aH8iXu8QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0IJRysutPdnvJD/HkSh9MTg/OSMB8GA1UdIwQY MBaAFDRe7KuVcM8K/6gb50jpEo9V5BbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDct ZTcyZmE1NTMxZDQ1LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDctZTcyZmE1NTMxZDQ1 LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBQRKESf LDVCjkQtbOKjEeDRPYQyefqTqjLORxTGpFzYbHMzRxbolrTQXIYp+xQE4CnNBjoJ D+R/NNnRx3+YQX+v147+BzPeXBikSa+rh9tdvnwmVIpYBX6RjHhw/tptEVCHMWA7 pg9hITkEsyuTp+xTsHs4QwuVBYfPp69gDEE1ytU6I7ExHUXAirqG3dUsVaSgHm3N 8wQLEq4EAUQOHQwdJtQ2lqRu2JXwYoUuDZ0UHnlfFsb3khybCj1uf9G+0vxDcGFL AnsfIfc0qkUAlfX4cal/6gmct4qK3y9Kce2sde1aAdzK4IHXJAjcYHhRdpbSmnab GLJZv6MspXvO7w== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:55 2026 by rpki-client